$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: 9n9+YTYkkVHqfRLkhz/iNdBeIcW+Q0GrzOxDKhZrU4w= Subject key identifier: 1C:3A:23:34:BA:45:80:7A:A0:97:84:3F:33:4C:89:CD:F2:80:54:9C Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: 64 Signing time: Tue 24 Mar 2026 23:11:15 +0000 Manifest this update: Tue 24 Mar 2026 23:11:14 +0000 Manifest next update: Tue 31 Mar 2026 23:11:14 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: B6xG5/BV5Is3IxuTL6w6HNv5SIxPgiQiA8NWG4yREcA=) 2: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ES3xbmOIjTGPeT8IfY1TCtnhdjiNJx4hr7CiNHyRg0w=) 3: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw=) 4: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OAI+YN11U1PZfLdiNPQNMB7UXRmGheB6bQN72SIA05g=) 5: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: vLVmclqSWSw9c6sWEF49QFNtj33DBN50eIGMmcN8s88=) 6: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: dWHrgDdQ9oxBHH3ChoJxtFZzUQfQ+vX9Kd8hcoNAwZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Mar 24 23:11:14 2026 GMT Not After : Mar 31 23:11:14 2026 GMT Subject: CN=69c31a13-9ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:ef:1c:7a:f0:21:2a:6a:59:c1:ce:65:66: 17:77:a6:87:78:20:1d:de:10:cb:a9:af:6c:40:02: 01:b5:20:de:7c:22:b1:77:86:47:4d:79:19:30:fb: 8b:73:4d:35:4b:b2:11:41:c9:7d:ad:5a:19:6c:09: 42:32:ff:92:4b:77:0f:21:d4:0c:35:5b:4f:b5:9f: 02:89:91:22:99:e9:6d:de:59:41:cb:9c:7b:25:60: b0:e2:20:f7:6f:df:91:87:2e:34:59:71:ef:f3:a2: 31:c7:55:e8:0b:52:80:ff:fa:14:b4:48:3a:5f:ce: 88:cf:2b:91:e2:73:5e:1c:5b:a5:28:d1:71:52:58: b5:42:13:98:07:20:68:fd:20:b2:a1:65:0e:14:64: 29:da:d8:d0:68:e3:b3:a6:91:7b:e1:68:57:6f:9b: d8:d9:18:4a:e4:67:35:22:0b:b5:71:33:a2:46:4e: 41:fe:f4:24:b3:0f:fd:33:06:3d:2a:57:4e:e7:7a: f3:a7:c3:18:28:de:10:19:63:c8:e4:c8:72:c5:e5: 85:c8:f0:35:2d:98:a0:f0:3a:b4:3a:f0:8a:d3:74: 36:74:d0:83:7d:33:52:a6:17:14:ca:9d:b2:16:0e: f7:10:c5:8d:c0:91:c0:a2:d8:71:39:23:f2:0a:07: 53:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3A:23:34:BA:45:80:7A:A0:97:84:3F:33:4C:89:CD:F2:80:54:9C X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c4:94:db:f0:be:e9:03:d0:28:3f:a0:85:9e:aa:2f:c5:3b: e0:e0:09:ca:52:3b:0b:6b:74:81:54:67:5b:68:5a:19:b1:9b: 88:85:c7:79:07:0f:e8:60:06:be:98:e3:be:ff:87:b0:b4:df: cd:59:64:04:18:5d:53:32:ef:e1:b6:a2:1b:a9:b5:b1:8b:de: ed:fc:c5:18:75:eb:fd:1f:59:44:ec:4c:81:4e:b1:27:8b:41: 30:b2:fe:79:7b:38:5a:20:ba:c8:47:2e:f2:d6:8b:09:18:75: 26:30:5d:ed:ab:8e:d3:3c:52:c0:6a:81:07:da:ec:9c:a9:d1: 92:4e:76:86:b6:1c:7f:1e:6d:0a:24:1d:38:3d:45:f6:5d:cb: 4a:d6:3d:66:8f:56:bc:d4:fb:be:85:00:c1:09:96:78:91:7c: 8d:e5:6a:f4:10:4f:5d:92:4d:91:23:8a:57:fa:3e:6b:cb:e9: 76:df:7b:ee:9c:b5:e1:6d:c8:ef:87:4b:20:58:30:62:24:d8: 44:95:a3:4a:60:0b:fd:38:43:e0:6a:e4:00:f3:49:a6:cb:c7: 92:0d:20:d1:7b:b4:dd:43:04:50:31:0e:51:7b:af:ef:10:3a: 7e:52:87:0c:10:0e:39:2e:b8:b1:2e:54:fb:9a:cc:fa:68:69: ef:cc:1f:fc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNjAzMjQyMzExMTRaFw0yNjAzMzEyMzExMTRaMBgxFjAUBgNV BAMTDTY5YzMxYTEzLTllZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJl+8cevAhKmpZwc5lZhd3pod4IB3eEMupr2xAAgG1IN58IrF3hkdNeRkw+4tz TTVLshFByX2tWhlsCUIy/5JLdw8h1Aw1W0+1nwKJkSKZ6W3eWUHLnHslYLDiIPdv 35GHLjRZce/zojHHVegLUoD/+hS0SDpfzojPK5Hic14cW6Uo0XFSWLVCE5gHIGj9 ILKhZQ4UZCna2NBo47OmkXvhaFdvm9jZGErkZzUiC7VxM6JGTkH+9CSzD/0zBj0q V07nevOnwxgo3hAZY8jkyHLF5YXI8DUtmKDwOrQ68IrTdDZ00IN9M1KmFxTKnbIW DvcQxY3AkcCi2HE5I/IKB1NhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHDojNLpF gHqgl4Q/M0yJzfKAVJwwHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDkzL0U1MkMxNEMwOUZGQTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzli UTVyYXprV2UyWENFSklSUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCAxJTb8L7pA9AoP6CFnqovxTvg4AnKUjsLa3SBVGdbaFoZsZuIhcd5Bw/oYAa+ mOO+/4ewtN/NWWQEGF1TMu/htqIbqbWxi97t/MUYdev9H1lE7EyBTrEni0Ewsv55 ezhaILrIRy7y1osJGHUmMF3tq47TPFLAaoEH2uycqdGSTnaGthx/Hm0KJB04PUX2 XctK1j1mj1a81Pu+hQDBCZZ4kXyN5Wr0EE9dkk2RI4pX+j5ry+l233vunLXhbcjv h0sgWDBiJNhElaNKYAv9OEPgauQA80mmy8eSDSDRe7TdQwRQMQ5Re6/vEDp+UocM EA45LrixLlT7msz6aGnvzB/8 -----END CERTIFICATE-----Generated at Thu Mar 26 12:56:54 2026 by rpki-client